Remarks 



[0009] Applicant respectfully requests reconsideration and allowance of all of the 
claims of the application. Favorable consideration is respectfully requested. The status 
of the claims is as follows: 

• Claims 1, 3-6, 8-14, 17-22, 24-29, 32-38, 41, and 42 are currently pending. 

• Claims 15 and 30 were previously canceled and Claims 2, 7, 16, 23, and 31 are 
canceled herein without prejudice to or disclaimer of the subject matter recited 
therein. 

• Claims 39 and 40 were previously withdrawn. 

• Claims 1,3, 14, 22, 29, and 41 are amended herein. 

Claim Objections 

[0010] Claims 1-12, 14, 16-20, and 42 were objected to as allegedly reciting "method 
steps which do not tie to a machine nor do the method steps transform the information 
in any way" (Office Action, page 3). Initially, Applicant respectfully notes that the 
foregoing claims should have instead been rejected under 35 U.S.C. § 101. 
Nevertheless, Applicant respectfully traverses the objection and further requests that 
the objection be reconsidered and withdrawn. Further, in spite of Applicant's traversal, 
without acquiescing to the propriety of the rejection, and for the sole purpose of 
expediting allowance of the present application, Applicant hereby amends independent 
Claims 1, 14, and 42 in the manner set forth above. Accordingly, it is respectfully 
submitted that the foregoing amendments to Claims 1, 14, and 42 resolve the above 
claim objections and that Claims 1-12, 14, 16-20, and 42 also recite statutory subject 
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matter. 



Cited Documents 

[0011] The following documents have been applied to reject one or more claims of 
the Application: 

• Applicant's Admitted Prior Art (AAPA): Brumme et al, U.S. Patent Application 
Publication No. 2005/0172286 

• Muhlestein: Muhlestein et al, U.S. Patent Application Publication No. 
2002/0004815 

• Muhl '102: Muhlestein et al, U.S. Patent Application Publication No. 
2002/0108102 

AAPA Fails to Anticipate Claims 1, 5, 6, 9, 10, and 42 

[0012] Claims 1, 5, 6, 9, 10, and 42 were rejected under 35 U.S.C. § 102(e) as 
allegedly being anticipated by AAPA. Applicant respectfully traverses the rejection and 
further request that the rejection be reconsidered and withdrawn. However, in spite of 
Applicant's traversal, without acquiescing to the propriety of the rejection, and for the 
sole purpose of expediting allowance of the present application, Applicant hereby 
amends independent Claim 1 in the manner set forth above. 

Independent Claim 1 

[0013] Applicant hereby amends independent Claim 1 to recite features previously 
recited in dependent Claims 2 and 7. Moreover, the Action acknowledges that AAPA 



Serial No.: 10/772,205 

Atty Docket No.: MS1 -1821 US 

Atty/Agent: Brett J. Schlameus 



lee@hayes The Business of !P a 

www.leehayes.com o 509.324.9256 



"does not explicitly teach wherein the conditional allowance is based upon a level of 
trust attributed to the first managed code caller" (Office Action, page 6). Accordingly, 
because AAPA does not teach the foregoing recitation, Applicant respectfully submits 
that AAPA does not anticipate independent Claim 1 , as amended. 

Dependent Claims 3-6, 8-13, and 42 

[0014] Dependent Claims 3-6, 8-13, and 42 depend from independent Claim 1. 
Applicant respectfully submits that each dependent claim is patentable over AAPA by 
virtue of their dependency from independent Claim 1, as well as for the additional 
features that each claim recites. Applicant also respectfully requests individual 
consideration of each dependent claim. 

[0015] Therefore, for at least the foregoing reasons, it is respectfully submitted that 
Claims 1, 3-6, 8-13, and 42 are not anticipated by AAPA, and therefore, the present 
rejection under 35 U.S.C. § 102(e) should be reconsidered and withdrawn. 

Claims 2, 3, 7, 8, 11-14, 16, 17, 19-24, 26-29, 31, 32, 34-38, and 41 Are Non-Obvious 
Over AAPA in view of Muhlestein 

[0016] Claims 2, 3, 7, 8, 11-14, 16, 17, 19-24, 26-29, 31, 32, 34-38, and 41 were 
rejected under 35 U.S.C. § 103(a) as allegedly being obvious over AAPA in view of 
Muhlestein. Applicant respectfully traverses the rejection and further requests that the 
rejection be reconsidered and withdrawn. However, in spite of Applicant's traversal, 
without acquiescing to the propriety of the rejection, and for the sole purpose of 
expediting allowance of the present application, Applicant hereby amends independent 
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Claims 1, 14, 22, 29, and 41 in the manner set forth above. Moreover, Applicant 
respectfully notes that Claims 2, 7, 16, 23, and 31 have been canceled, thus obviating 
the rejection with respect to the above claims. 

Independent Claim 1 

[0017] Although independent Claim 1 was not rejected under 35 LLS.C. § 103(a), 
Applicant hereby amends Claim 1 to recite features previously recited in dependent 
Claims 2 and 7, which were each rejected under 35 U.S.C. §1 03(a) as being obvious 
over AAPA in view of Muhlestein. Accordingly, Applicant will address independent 
Claim 1 in the above section. 

[0018] For at least the reasons set forth below, Applicant respectfully submits that 

neither AAPA nor Muhlestein teach or suggest at least the following features recited in 

independent Claim 1: 

conditionally authorizing, by the computing device, calls from one of 
a plurality of managed code callers to the first method based on the first 
method's required level of trust and a level of trust attributed to the first 
managed code caller, the level of trust attributed to the first managed code 
caller corresponding to an identity of a provider of the first managed code 
caller. 

The Action acknowledges that AAPA "does not explicitly teach wherein the conditional 
allowance is based upon a level of trust to the first managed code caller " (Office Action, 
page 6; emphasis added). Furthermore, the Action asserted that Muhlestein, and not 
AAPA, teaches that "the level of trust attributed to the first managed code caller 
corresponding to an identity of a provider of the first managed code caller," as presently 
recited in Claim 1 (Office Action, page 7; with respect to Claim 7). However, the Action 
further asserts that Muhlestein teaches the foregoing recitations. Applicant respectfully 
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disagrees. 

[0019] More particularly, it is respectfully submitted that Muhlestein neither teaches 
nor suggests "conditionally authorizing, by the computing device, calls from one of a 
plurality of managed code callers to the first method based on the first method's 
required level of trust and a level of trust attributed to the first managed code caller," as 
presently recited in Claim 1 . The portions of Muhlestein cited in the Action (paragraphs 
[0043]-[0045]) teach that a runtime can perform security checks and enforce security 
policy as managed code is loaded and executed (paragraph [0043]). Additionally, with 
code access security, developers can specify the required permissions that their code 
requires and at load time and on method calls, the runtime verifies that the code can be 
granted the permission it has asked for (paragraph [0044]). If not, a security violation 
may be reported (paragraph [0044]). Further, Muhlestein teaches that in role-based 
security, permissions are based on user identity rather than code identity (paragraph 
[0045]). Moreover, Muhlestein teaches that roles represent categories of users and that 
policies for granting permissions are assigned to each defined role (paragraph [0045]). 
[0020] Despite the foregoing teachings, however, Applicant respectfully submits that 
Muhlestein does not teach the above recitation. For instance, Muhlestein merely 
teaches specifying permissions that certain code requires and subsequently verifying 
that the code can be granted those permissions that it has asked for (paragraph [0044]). 
That is, the code is either granted a particular permission or a security violation is 
reported if the code is not granted that permission. Rather, Claim 1 recites either 
authorizing calls, preventing calls, or conditionally authorizing calls from one of a 
plurality of managed code callers to the first method. Accordingly, because Muhlestein 
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teaches either granting permission to code or reporting a security violation, Applicant 
submits that Muhlestein does not teach "conditionally authorizing..," as presently recited 
in Claim 1. 

[0021] Further, it is respectfully submitted that Muhlestein does not teach 
"conditionally authorizing... based on the first method's required level of trust and a level 
of trust attributed to the first managed code caller," as presently recited. Instead, 
Applicant submits that Muhlestein merely teaches "required permissions" that code 
requires (paragraph [044]) and that permissions are based on user identity and what 
roles a user is a member of (paragraph [0045]). Further, Muhlestein does teach or 
suggest that such permissions are based on a required level of trust and a level of trust 
attributed to the first managed code caller, as presently recited. In fact, Muhlestein 
conclusory states that the runtime verifies that code can be granted the permission it 
has asked for without mentioning, or even suggesting, any level of trust whatsoever. 
Therefore, Applicant respectfully submits that Muhlestein neither teaches nor suggests 
the above recitation of independent Claim 1 . 

[0022] Further still, it is submitted that Muhlestein also does not teach or suggest "the 
level of trust attributed to the first managed code caller corresponding to an identity of a 
provider of the first managed code caller," as presently recited in Claim 1. Initially, as 
stated above, because Muhlestein does not teach or suggest any required level of trust, 
Applicant respectfully submits that Muhlestein does not teach the above recitation. 
Additionally, instead of teaching the foregoing recitation, Muhlestein teaches that in role- 
based security, permissions are based on user identity, roles represent categories of 
users, and polices for granting permissions are assigned to each defined role 
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(paragraph [0045]). Furthermore, Muhlestein teaches that at run time, the identity of the 
user on whose behalf the code is running is determined and the runtime subsequently 
determines what roles the user is a member of and then grants permissions based on 
those roles (paragraph [0045]). That is, Muhlestein teaches granting permissions based 
on roles, which represent categories of users (emphasis added). On the contrary, 
independent Claim 1 recites "the level of trust attributed to the first managed code caller 
corresponding to an identity of a provider of the first managed code caller." Accordingly, 
instead of teaching attributing a level of trust specifically to a first managed code caller 
corresponding to an identity of its provider, Applicant submits that Muhlestein teaches 
permissions based on a broad category of a plurality of users. Thus, for at least the 
foregoing reasons, Applicant respectfully submits that Muhlestein fails to teach or 
suggest the foregoing recitations of independent Claim 1 . 

[0023] Moreover, AAPA does not remedy the deficiencies in Muhlestein noted above 
with respect to independent Claim 1 , nor does the rejection make any arguments to that 
effect. Accordingly, independent Claim 1 is patentable over AAPA and Muhlestein, both 
singularly and in combination with one another. 

Dependent Claims 3-6. 8-13, and 42 

[0024] As stated above, independent Claim 1 is patentable over AAPA in view of 
Muhlestein. Accordingly, dependent Claims 3-6, 8-13, and 42 are also patentable over 
the above combination of references by virtue of their dependency on independent 
Claim 1, as well as for the additional features that Claims 3-6, 8-13, and 42 recite. 
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Independent Claims 14, 22. 29. and 41 

[0025] Independent Claims 14, 22, 29, and 41 recite features similar to those 
discussed above with regard to independent Claim 1. Accordingly, Applicant 
respectfully submits that independent Claims 14, 22, 29, and 41 are also patentable 
over AAPA and Muhlestein, both singularly and in combination with one another, for at 
least the reasons set forth above. 

Dependent Claims 17-21. 24-28. and 32-38 

[0026] As stated above, independent Claims 14, 22, 29, and 41 are patentable over 
AAPA in view of Muhlestein. Accordingly, dependent Claims 17-21, 24-28, and 32-38 
are also patentable over the above combination of references by virtue of their 
dependency on independent Claims 14, 22, 29, and 41, as well as for the additional 
features that Claims 17-21, 24-28, and 32-38 recite. 

[0027] Further, without any teaching or suggestion as to how or even why the 
descriptions in AAPA may be modified, it is further submitted that one of ordinary skill 
would not have been motivated to modify the implementations described by AAPA with 
Muhlestein, nor would it have been obvious to try. Further, as AAPA fails to teach or 
suggest several features recited in independent Claims 1, 14, 22, 29, and 41, and 
Muhlestein fails to remedy the deficiencies in AAPA set forth above, Applicant 
respectfully submits that one of ordinary skill in the art would not have sought to modify 
AAPA using such a reference. Likewise, as the references noted above lack several 
features recited in independent Claims 1, 14, 22, 29, and 41, it would not have been 
obvious to try, at the time of the invention, to make the inventions as presently claimed. 
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Claims 4, 18, 25 and 33 Are Non-Obvious Over AAPA and Muhlestein in further 
view of Muhl '102 

[0028] Claims 4, 18, 25 and 33 were rejected under 35 U.S.C. § 103(a) as allegedly 
being obvious over AAPA in view of Muhlestein, in further view of Muhl '102. Applicant 
respectfully traverses the rejection and further requests that the rejection be 
reconsidered and withdrawn. 

[0029] As stated above, independent Claims 1, 14, 22, and 29 are patentable over 
AAPA in view of Muhlestein. Furthermore, Muhl '102 neither remedies the deficiencies 
in AAPA and Muhlestein noted above with respect to independent Claims 1, 14, 22, and 
29, nor does the rejection make any arguments to that effect. As a result, for at least 
the foregoing reasons, independent Claims 1,14, 22, and 29 are patentable over AAPA, 
Muhlestein, and Muhl '102, both singularly and in combination with one another. 
Accordingly, dependent Claims 4, 18, 25, and 33 are also patentable over the above 
combination of references by virtue of their dependency on independent Claims 1, 14, 
22, and 29, as well as for the additional features that each claim recites. 
[0030] Further, without any teaching or suggestion as to how or even why the 
descriptions in AAPA may be modified, it is further submitted that one of ordinary skill 
would not have been motivated to modify the implementations described by AAPA with 
Muhlestein or Muhl '102, nor would it have been obvious to try. Further, as AAPA fails 
to teach or suggest several features recited in Claims 4, 18, 25, and 33, and both 
Muhlestein and Muhl '102 fail to remedy the deficiencies in AAPA set forth above, 
Applicant respectfully submits that one of ordinary skill in the art would not have sought 
to modify AAPA using such references. Likewise, as the references noted above lack 
several features recited in Claims 4, 18, 25, and 33, it would not have been obvious to 
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try, at the time of the invention, to make the inventions as presently claimed. 

[0031] Thus, AAPA, Muhlestein, and Muhl '102, whether taken alone or in 
combination (assuming for the sake of argument that they can be combined), fail to 
disclose or suggest the recitations of independent Claims 1, 14, 22, 29, and 41. 
Accordingly, Applicant respectfully submits that independent Claims 1,14, 22, 29, and 
41 are patentable over the proposed combination of references. Furthermore, 
dependent Claims 3-6, 8-13, 17-21, 24-28, 32-38, and 42 are also patentable over the 
above combination of references by virtue of their dependency on independent Claims 
1, 14, 22, and 29, as well as for the additional features that each claim recites. 
Applicant also respectfully requests individual consideration of each dependent claim. 
[0032] Therefore, for at least the foregoing reasons, it is respectfully submitted that 
Claims 1, 3-6, 8-14, 17-22, 24-29, 32-38, 41, and 42 are not obvious over the various 
combinations of AAPA, Muhlestein, and Muhl '102, and therefore, the present rejections 
under 35 U.S.C. § 103(a) should be reconsidered and withdrawn. 



Serial No.: 10/772,205 

Atty Docket No.: MS1 -1821 US 

Atty/Agent: Brett J. Scbiameus 



lee@hayes The Business of iP^ 

www.leehayes.com * 509.324.9256 



Conclusion 



[0033] For at ieast the foregoing reasons, it is respectfully submitted that Claims 1 , 3- 
6, 8-14, 17-22, 24-29, 32-38, 41, and 42 are in condition for allowance. Applicant 
respectfully requests reconsideration and withdrawal of the rejections and an early 
notice of allowance. 

[0034] The arguments and amendments presented herein were necessitated by the 
most recent Office Action and the telephone interview between Applicant's 
representative and Examiner Gee dated June 23, 2009, and because Applicant 
earnestly believed that the claims were in condition for allowance at the time of filing the 
previous response. If any issue remains unresolved that would prevent allowance of 
this case, Applicant requests that the Examiner contact the undersigned attorney 
to resolve the issue . 

Respectfully Submitted, 

Lee & Hayes, PLLC 
Representative for Applicant 




Dated: 



Brett J. Schlameus {brett@leehayes.com; 206-876-6022) 
Registration No. 60827 



Reviewer/Supervisor: Robert C. Peck (robp@leehayes.com; 206-876-6019) 
Registration No. 56826 
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